NP-200 system security design review

NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007

PRJ-2026-0042-DRV-0001Threat review

Threat workbench

STRIDE register for candidate AREV-0004; a row opens the threat record.

Context: source SRC-0004 (network-topology.drawio)


Gateway flood starves dosing command channelTV-000133Denial of service	High	Treatment planned	Owen Blake	High
Cloud telemetry stream exposes PHI to unauthorized readerTV-000131Information disclosure	Medium	Treatment planned	Owen Blake	Medium
Protocol downgrade between gateway and cloud ingestionTV-000138TamperingInformation disclosure	Low	Assessed	Owen Blake	High
Shared service account between gateway services enables lateral movementTV-000141Elevation of privilege	Not assessed	Proposed	Unassigned	Medium

Gateway flood starves dosing command channelTV-000133Denial of service
HighTreatment planned
Owner
Owen Blake
Cloud telemetry stream exposes PHI to unauthorized readerTV-000131Information disclosure
MediumTreatment planned
Owner
Owen Blake
Protocol downgrade between gateway and cloud ingestionTV-000138TamperingInformation disclosure
LowAssessed
Owner
Owen Blake
Shared service account between gateway services enables lateral movementTV-000141Elevation of privilege
Not assessedProposed
Owner
Unassigned

4 threats